Security Engineer

• Establish and scale CoinTracker’s security foundation for B2C, B2B, and B2G businesses.
• Define and implement the security roadmap, balancing short-term and long-term security needs.
• Conduct security gap assessments, implement baseline policies, and lead third-party audits such as SOC 2 and penetration tests.
• Embed security practices into engineering workflows and partner with teams to manage risks.
• Define and operationalize security incident response processes, and lead security postmortems to improve security operations.

• 8+ years of experience in security engineering or related roles.
• Deep understanding of core security domains like application security, infrastructure and cloud security, identity and access management, and security operations.
• Hands-on experience implementing security measures with engineering and infrastructure teams.
• Experience with security frameworks such as SOC 2, ISO 27001, NIST, and GDPR.
• Experience leading or supporting third-party audits, penetration testing, and internal risk assessments.
• U.S. citizen and resident.
• (Bonus) Familiarity with risks and threat models in crypto or financial services.
• (Bonus) Security certifications such as CISSP and GIAC.

Pay range: $175K - $240K

• Equity in CoinTracker
• Medical, dental, and vision insurance
• 401(k) retirement plan
• Life insurance
• Paid time off (PTO)